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Method for the automatic configuration of a communications 
device v 

The invention relates to a method for the automatic 
5 configuration of communications devices in logical network 
areas . 

For logical segmentation of packet-oriented networks - often 
also referred to by specialists as LANs or Local Area Networks 
- one form is known in which the network is organized as a so- 
10 called virtual LAN. 

A virtual LAN or VLAN is formed by a group of network nodes 
which are grouped into autonomous domains or broadcast . domains . 
Whether or not a network node belongs to a VLAN does not depend 
on the geographical location of the network node. It is 
15 exclusively determined by software configuration and can be 

changed if a network node is to be assigned to a new workgroup. 

If a virtual LAN is to be extended over a number of network 
node devices, expanding the MAC (Media Access Control) address 
which identifies the destination and the origin of the data 
20 packets exchanged by an identification number of the virtual 
LAN is advantageous. This identification number is mostly 
referred to as a VLAN number or VLAN ID or Virtual LAN 
Identification Number. 

With a method referred to as frame tagging a VLAN ID 
25 identifying the VLAN is set as a tag (marking) after the type 
field of the MAC packet. This method is standardized in IEEE 
802. 1Q and uses a word length of 12 bits for the tag. This 
theoretically gives values for the VLAN ID of 0 to 4095. In 
802. 1Q networks tag-free MAC packets can continue to be 
30 exchanged for compatibility reasons. These tag-free MAC packets 
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are allocated a VLAN ID with a value of between 1 and 4095. 
Tag- free MAC packets are assigned to what is known as a native 
VLAN. Data packets tagged with a VLAN ID of 0 (zero) are also 
to be assigned to this native VLAN. In this description the 
5 terms "tag" and "identification number" cover both the cases of 
tagging with VLAN ID values between 0 to 4095 as well as the 
equally-likely possibility that a MAC packet is not tagged. 

One embodiment of a virtual LAN is what is known as the port- 
based VLAN. In this a VLAN is set up to extend within an IP 
10 (Internet Protocol) subnetwork or also to cover a number of IP 
subnetworks and mapped at a number of ports of a network node 
device. The network node device is usually embodied as a 
switch, the mapping to ports of this switch also being referred 
to as switchport mapping. 

15 One application of a virtual LAN is produced by connecting 

telephony components which use packet-oriented communication to 
a VoIP (Voice-over-IP) communication network. A communications 
device - for example a VoIP telephone - with a predetermined 
WID (Voice VLAN ID) is usually connected to the switch. The 

20 designation Voice VLAN ID already indicates that a VLAN 
assigned to this VLAN ID is predominantly reserved for 
connection of telephony components. 

Otherwise the connection to a switch is not absolutely vital 
for a device of a VLAN. Instead of port-based virtual LANs, 
25 VLANs without an assigned switch are also conceivable. 

A communications device assigned to a VLAN can in its turn 
contain a switch - e.g. arranged internally. This internal 
switch is used to connect a computer system to the 
communications device in order to ensure the exchange of data 
30 of both data processing services and also communication 

services with a shared data link. Such an arrangement is thus 
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often referred to by the phrase "Single Wire to Desk". 



While the communications device usually communicates using data 
packets tagged on the basis of an identification number (WID) 
- "Tagged Frames" - the computer system connected to it usually 
5 uses "Untagged Frames n , i.e. data packets which do not contain 
an identification number (WID or VLAN ID) . 

The description below assumes a usual port configuration of the 
switch in which only untagged data packets as well as tagged 
data packets are forwarded with the WID provided for this 

10 port. For putting the communications device into service this 
device is to be connected to the port of the switch for 
example. The WID assigned to the VLAN - for example provided 
for this port - is to be configured in the communications 
device since the switch discards any data packet which does not 

15 contain the WID provided for the connected port. Data packets 
without a tag containing a WID are reserved for data 
communication with the processing unit and also pass the 
switch. 

The configuration of the WID at each of the communications 
20 devices in a communication system is a time-consuming exercise 
when a plurality of communications devices are put into 
operation for the first time. Furthermore this configuration 
has to be undertaken again each time that the communications 
device is moved to another location since each connector socket 
25 is generally assigned to another switchport with a different 
WID in each case. Manual configuration is a complex process 
involving extensive outlay in personnel and time. For a more 
rational commissioning the aim is thus automatic configuration 
of the WID of communications devices or of the VLAN ID of 
30 packet-oriented communicating terminals in a port-based virtual 
LAN. 
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A method for an automated configuration of a VLAN ID in a 
virtual LAN is already known from US patent application US 
2002/0003801 Al . A communication end point connected to a 
switch sends a confirmation message tagged with a selected VLAN 
5 ID to the switch and waits for a response message. If no 

response message arrives from the switch, the selected VLAN ID 
is tagged as invalid and the process is repeated with another 
VLAN ID until a response message arrives from the switch for 
this type of acknowledgment message. The VLAN ID selected for 

10 the acknowledgement message is tagged as valid for this port- 
based VLAN and the communication end point is reconfigured with 
this VLAN ID. To select a VLAN ID to be checked by the 
communication end point information in GVRP messages ( "GARP 
VLAN Registration Protocol" with GARP standing for "Generic 

15 Attribute Registration Protocol") is used which is sent at 
intervals from the switch to all end points connected to it. 
These GVRP messages contain the VLAN IDs of all communication 
end points connected to the switch. 

The particular disadvantage of this method is that the switch 
20 must be embodied in this case with a control logic to handle 
GVRP messages. A further disadvantage lies in an increased 
amount of data which needs to be exchanged because of the need 
to "try out" different VLAN IDs during the configuration phase. 

The object of the invention is to provide means for an 
25 automated configuration of communications devices in a virtual 
packet-oriented network which when used will avoid the 
disadvantages stated above. 

The object is achieved by a method with the features of patent 
claim 1. 

30 In accordance with the invention a configuration message is 
transmitted by a network element localized outside a 
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subnetwork. The subnetwork is to be understood for example as a 
domain within a packet-oriented network, for example a Local 
Area Network, LAN. The network element is present for example 
as a self-contained server unit, or also in the form of an 
5 executable process on a communicating unit at any location. The 
communications device is assigned to a virtual network. The 
virtual network in this case extends at least partly within the 
subnetwork and can also alternatively extend over a number of 
subnetworks. The configuration message is initially sent to a 

10 network node device administering the subnetwork, usually a so- 
called level-3 switch or router. The network address of the 
subnetwork is entered in this case as the destination address 
of this configuration message. This network address is entered 
for example in a directed broadcast format. The network address 

15 of the subnetwork administered by the network node device 

entered as destination in the configuration message tells the 
network node device to send this in the form of a broadcast 
message to the virtual network, in which case on 802. 1Q trunks 
explained in greater detail below for forwarding of the 

20 configuration message as a broadcast message to a virtual ' 
network by the router or switch the broadcast message is 
supplemented by the identification number intended for the 
virtual network, if the WID does not match a so-called native 
VLAN of the trunk defined in IEEE 802. 1Q. The broadcast message 

25 is received and processed by the communications device. In this 
processing the identification number sent with the message is 
read out and the communications device configured with this 
number. 

A significant advantage of the method in accordance with the 
30 invention can be seen in the fact that no additional tasks or 
processing steps are required for the existing network node 
device for application of the method in accordance with the 
invention. The procedural steps involved in converting the 
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configuration message into a broadcast message as well as the 
use of an identification number are included in the normal 
processing steps of this type of network node device, 
configured as a router for example. 

5 An advantage of the method in accordance with the invention is 
further to be found in a central point for administration of 
configuration messages or for transfer of these communication 
messages . The configuration messages themselves do not have to 
be generated in the subnetworks or virtual networks here but 
10 can be transmitted over the entire packet-oriented network with 
the involvement of further routers to the network node device 
and finally to the communications device. 

A further advantage of the method in accordance with the 
invention can be seen in the fact that for an automatic 
15 configuration of all communications devices of a VLAN only one 
individual configuration message is required. This renders 
traffic which imposes a load on the network as a result of 
request messages and response messages for each communications 
device superfluous . 

20 A further advantage of the method in accordance with the 
invention arises from the initial installation of all 
communications terminals when a new communications system is 
set up. The method in accordance with the invention guarantees 
a configuration of each terminal without any manual 

25 intervention being required other than physical installation of 
the devices . 

Advantageous developments of the invention are specified in the 
subclaims . 



Advantageously addressing is undertaken by the network address 
30 in the form of a directed broadcast network address. This 
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measure guarantees economic data management in the assignment 
of network addresses to associated virtual networks. Since 
network node devices administering a number of subnetworks, as 
recipients of a directed broadcast message, tag this message 
5 before forwarding it to the designated (directed) virtual 

network with a reserved identification number in each case - or 
leave it untagged, if an existing VLAN ID matches the port VLAN 
ID defined in 802. 1Q - and forward it as a broadcast message 
into this area, the unique addressing of the identification 
10 number to be transmitted is guaranteed. 

An advantageous embodiment of the invention provides for a 
level -2 network node device or switch arranged between the 
network node device and the virtual network. To put it more 
precisely this switch is also a component of a virtual network 

15 defined in this way. An advantage of this switch is that is 
guarantees a defined transition interface through which the 
virtual network is collectively linked via a dedicated router 
uplink to the overall network in conjunction with topological 
arrangement of the subscriber structures. Advantageously no 

20 requirements are to be imposed on a standardized switch for 
executing the method in accordance with the invention, in 
particular no specific processing steps on this switch have to 
be defined.. 

In a preferred embodiment for a communications terminal as well 
25 as for a connected processing unit in an IP subnetwork one VLAN 
is covered in each case and is mapped onto precisely one port 
of the switch (port or switchport) in each case. The uplink 
ports between the switches and to the router interface are 
defined as what are known as Q trunks so that any data traffic 
30 which is not restricted to a subscriber's IP subnetwork must 
pass the router. A connection between 802 . lQ-capable network 
elements is referred to as a trunk connection, i.e. terminals 
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which understand the VLAN packet format and which can read out 
the tag of a packet. Such a trunk makes multiplexing of a 
number of VLANs between a number of VLAN network elements 
possible . 

5 Advantageously this switch only passes data packets which 

contain a provided identification number (VLAN ID or WID) in a 
marker section "tag" of an 802. 1Q header. 

In a further advantageous . embodiment of the invention the 
switch features a number of ports, with each port being 
10 assigned a virtual network with an identification number or 
VLAN ID in accordance with so-called switchport mapping. 

An exemplary embodiment with further advantages and embodiments 
of the invention is explained in more detail below on the basis 
of the drawing. 

15 The diagrams show': 

Fig. 1A: a structure diagram for schematic representation of 

an arrangement of a computer system and a 

communication unit; 
Fig. IB: a structure diagram for schematic representation of a 
20 connection of a computer system and a communication 

unit to a switch; and 
Fig. 2: a structure diagram for schematic representation of a 

packet-oriented network. 

Fig. 1A shows a communications device TP, which is embodied for 
25 example as a VoIP (Voice over Internet Protocol) telephone TP. 
An internal switch IS is assigned to the communications device 
TP or is also - illustrated by a box with a dotted and dashed 
outline - a part of this communications device TP. A first 
connection CI leading towards or away from the internal switch 
30 IS is shown in the diagram by a more solid line in order to 
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illustrate that the bidirectional data link of this first 
connection CI transports both the data traffic for the 
communications device TP and also for a computer system CMP. 
Because of this fact the second connection CI is often also 
5 referred to as a trunk. The communications device TP is 
connected by a second connection C2 - for example via the 
internal switch IS - to the computer system CMP. 

The method in accordance with the invention is explained in 
greater detail below, with further reference to the functional 
10 units of the preceding figures in each case. 

Fig. IB shows a first communications device TP1 with an 
assigned internal switch IS1, which is connected via a 
connection C2 to a computer system CMP2 . The communications 
device TP1 is connected via its internal switch IS1 to a port 
15 P4 of a switch LSW by means of a connection CI. 

A further communications device TP3 with an assigned internal 
switch IS3 is connected via a connection C4 to a further 
computer system CMP4 . The further communications device TP3 is 
connected via its internal switch IS3 to a further port PI of 
20 the switch LSW. 

The switch LSW contains a number of ports, of which a first 
port PI, a second port P2 , a third port P3 and a fourth port P4 
are shown in the drawing. A further port Px serves for example 
to connect the switch to a network node device - not 

25 illustrated - for example a further switch or a router. In the 
further embodiment to describe the figure on the basis of Fig. 
IB only a circuit of the first and of the fourth ports P1,P4 is 
considered. Further ports P2 , P3 , Px of the switch LSW are 
optionally connected to further network elements - not shown. A 

30 trunk connected to the port Px is merely indicated in the 
drawing . 
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A first virtual network VLAN1 comprises the two communication 
terminals TP1,TP3 and the internal switches 151,183 assigned to 
them in each case. The second virtual network VLAN2 comprises 
the two computers CMP2 and CMP 4 as well as the internal 
5 switches IS1,IS3 assigned to the two communication terminals 
TP1,TP3 in each case. The two virtual networks VLANl , VLAN2 
further comprise the switch LSW and also other network elements 
- not shown - which are connected to the port Px for example. 
For reasons of clarity the fact that the switch LSW as well as 
10 further network elements belong to the virtual network 
VLANl ,VLAN2 is not shown in the drawing in Fig. IB. 

Furthermore it is assumed for reasons of clarity that in the 
exemplary embodiment the first virtual network VLANl with a 
first subnetwork covers the second virtual network VLAN2 with a 
15 second subnetwork. In technical implementations it is possible 
in some cases to extend the virtual networks VLANl, VLAN2 over a 
number of subnetworks . 

A subnetwork defines an area within a larger network area. A 
subnetwork is addressed by an IP (Internet Protocol) address 

20 with the aid of a subnet mask. This specifies the bit of an IP 
address up to which the network component extends, the other 
bits of the IP address characterize what is known as a host 
component. The network component designates the network which 
is to be addressed, the host component addresses the host in 

25 this network An IP address is specified for example using a 32- 
character binary number. To make it easier to understand, this 
binary number is subdivided into four octets of eight bits 
each, the period is used as a separator. Each octet can now be 
converted into a decimal number which can have values of 

30 between 0 and 255. A network address is the first address in a 
network which can also be a subnetwork. The network address 
does not identify a host in this network but rather the overall 
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network. There cannot be a network element which has this 
address . 

The example discussed below assumes a network address of 
10.1.1.0 for the first subnetwork - identical as regards the 
5 area that it covers to the first virtual network VLAN1, whereby 
the host component in the subnetwork for example is restricted 
to the last octet, an associated subnet mask is consequently to 
be specified with 255.255.255.0. 

The first virtual network VLAJSF1 is illustrated in greater 
10 detail below. 

In a configured operating mode a virtual network VLAN1 is 
defined by the communications devices TP1 and TP3 using what is 
known as the frame tagging method. To this end the 
communications device TP1 exchanges data packets in the 

15 configured operating mode with the switch LSW, in which a MAC 
("Media Access Control") address identifying the destination 
and the origin is expanded by a 12-bit IEEE 802. 1Q standardized 
tag or marking. This identifier or marking contains in this 
case the identification number of the VLAN defined by it and, 

20 because of the real-time communication character of the 

communications device TP, is designated as a Voice VLAN ID 
("WID" ) . In a general designation this VLAN ID is also 
referred to by the term "identification number". Since in the 
following exemplary embodiment virtual networks for structuring 

25 communication networks are considered, the designation WID is 
mostly used. 

By contrast with the exchange of tagged data packets by the 
communications device the computer system CMP2 exchanges non- 
identified or non-tagged data packets ("Untagged Frames") with 
30 switch LSW. These untagged data packets are predominantly 

reserved for pure, non-realtime-critical data communication. 
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In a mode in which the communications device TP1 is not yet 
configured, this device has no knowledge of the WID to be used 
in its virtual network VLAN1 for packet-oriented communication. 
Furthermore it has not yet been assigned any network address or 
5 IP (Internet Protocol) address valid in the overall packet- 
oriented network - not illustrated. Such a mode not only occurs 
when the communications device TP1 is put into operation for 
the first time but also after a restart of the communications 
device system TP1 or after a "replugging" of the communications 
10 device TP at one of the other ports Pl f P2,P3 of the switch. 

Without knowledge of the valid WID no request message to a 
computer featuring an IP address - not shown - is possible 
either, since the switch LSW1 on the one hand discards all data 
packets with a WID which is not the same as the one provided 
15 for the virtual network VLANl and on the other hand untagged 
data packets without a WID are generally reserved for pure 
data communication. 

A general description of an IP address assignment based on the 
DHCP protocol is initially given below without reference to the 
20 drawing . 

The DHCP (Dynamic Host Configuration Protocol) is a 
client/server protocol which handles the allocation of IP 
addresses. DHCP is used for dynamic and automatic terminal 
configuration, e.g. issuing IP addresses. The corresponding IP 

25 addresses are requested by the connected DHCP clients at a DHCP 
server. The addresses are taken from an address pool which is 
defined at the DHCP server. For the dynamic assignment a client 
is temporarily issued with an IP address valid for a specific 
time. If the IP address is no longer needed by the client, the 

30 server has this address available again and can issue it to 
another client for example. 
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The DHCP protocol recognizes a number of message types with 
which the overall exchange of information between client and 
server is controlled. A request message (DHCP-Discover ) of the 
client is sent by means of a (broadcast) message sent to the 
5 entire network to check the network for different DHCP servers. 
As a response message (DHCP-Offer) the DHCP server sends a 
broadcast message or a directed message (Unicast),in which a 
configuration is proposed to the client. If the DHCP client 
accepts the configuration parameters offered, it uses a 

10 broadcast to transmit a request message (DHCP-Request ) . The 

server then uses an acknowledgement message (DHCP-Acknowledge) 
to send the IP address and/or optionally further configuration 
parameters. If the IP address is no longer needed by the 
client, the latter sends a release message ( "DHCP-Release" ) to 

15 the server. Specific messages must be sent on both the server 
and the client side as broadcast messages so that all other 
clients and servers are informed about the configuration and do 
not unnecessarily reserve addresses and configurations. Since 
specific network node devices do not generally forward 

20 undirected broadcast messages, there also exist "directed" 
broadcast messages. For the case of a DHCP request message 
however this non- forwarding does not generally apply. 

The DHCP method in the form previously described requires a 
DHCP server in each virtual network since undirected broadcast 

25 messages are not generally transported across VLAN boundaries. 
The DHCP protocol however provides for an optional forwarding 
of the broadcast messages by what are known as DHCP relays. 
Thus each VLAN only needs a DHCP relay which mostly forwards 
the broadcast message as a directed message to one or more DHCP 

30 server. The DHCP relay in this case enters into the message the 
own address of the port at which the broadcast message was 
received. The DHCP server now decides on the basis of this 
address and other considerations which information to return. 
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Often this forwarding function is taken over by routers. 

In anticipation of the description of Fig. 2, a router there, 
ROU1 has implemented two DHCP relay functions: One at a virtual 
port to a first virtual network VLAN1 there and one at a 
5 virtual port to a second virtual network VLAN2 there. For 

forwarding untagged DHCP messages it enters a valid address for 
the second virtual network VLAN2 there, whereas before 
forwarding DHCP messages tagged for the first virtual network 
VLAN1 it enters its address valid for the first virtual network 
10 VLAN1 into a data part of the DHCP message. 

Before the communications device TP1 can obtain an IP address a 
configuration of the WID is first necessary. This 
configuration has previously mostly been undertaken by a 
service engineer who sets the WID manually on each 
15 communications device of a communication system - not shown. 

A first strategy for automatic configuration of the 
communications device TP1 is to store the WID last used, i.e. 
the one valid in the virtual network. When the communications 
device TP1 is restarted, e.g. as a consequence of a power 

20 outage, storage of the last WID produces a successful 

configuration; The stored WID is used for a request message of 
a DHCP server - not shown. The request message is allowed 
through by the switch LSW and passed on to the DHCP server 
which reserves a network address or IP address for the 

25 communications device TP1 and notifies the latter in a response 
message to the communications device TP1 . With this 
acknowledgement it is again possible at the communications 
device TP1 to set the last stored WID as the currently valid 
WID, which concludes the automatic configuration of the WID. 

30 In the case of replugging the communications device TP1, for 
example from the original fourth port P4 to the third port P3 , 
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there are certain situations in which the automatic 
configuration described above based on the last stored WID is 
not successful. Since at this third port P3 for example there 
is a virtual network - not shown - which uses a WID with a 
5 different value, all corresponding messages sent by the 

communications device TP1 with a WID assigned to the first 
virtual network VLAN1 are discarded by the switch LSW. 

The absence of a response message to a request message - 
containing an invalid WID in the new virtual network - to the 

10 DHCP server - not shown - means that a last remaining option 

for automatic configuration by the communications device TP1 is 
a scan process. With this scan process for example a number of 
request messages are generated with an incremented WID in each 
case, until with a correct WID the request message passes 

15 through the switch LSW and an acknowledgement message is 

obtained from the DHCP server at the communications device. 
Dictated by a bit width of 12 for the VLAN-ID field, a total of 
4095 further WIDs are to be scanned in addition to the 
untagged VLAN and VLAN 0 . 

20 The first virtual network VLAN1 can - as already indicated - be 
occupied by a number of subnetworks in an alternate embodiment 
via a connected router - not shown. To configure all 
communications devices in the first virtual network VLAN1 
automatically, it is sufficient to send only one configuration 

25 message in one of the subnetworks of the first virtual network 
VLAN1 . All communications devices TP1,TP3 are thus configured 
with the correct WID, even if they are later assigned IP 
addresses for different subnetworks by the DHCP server. 

Fig. 2 shows a larger overview of the packet-oriented network 
30 LAN. 

In a similar way to the previous exemplary embodiment a first 
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communications device TP1 is connected via an assigned internal 
switch IS1 to a first switch LSW1 . There is no presentation of 
individual .ports of the first switch LSW1 in Fig. 2. At the 
first communications device TP1 a computer system CMP 2 is 
5 connected via the internal switch IS1. The virtual networks 
VLAN1 , VLAN2 as before have the same extent as the associated 
subnetworks. Unlike the simplified presentation according to 
Fig. IB the virtual networks VLAN1 , VLAN2 are shown more 
correctly as regards their extent over the first switch LSW1 up 
10 to the first router ROU1 . 

In a similar way a further communications device TP3 is 
connected via an assigned internal switch IS3 to a second 
switch LSW2 . A further computer system CMP4 is connected to the 
further communications device TP3 via the internal switch IS3 . 
15 The virtual networks VLAN3,VLAN4 structured in a similar way to 
the above virtual networks VLAN1,VLAN2 have the same extent as 
the associated subnetworks in each case. 

The first router ROU1 as well as a further router ROU2 is shown 
in the drawing by a circle containing arrows, with the 
20 direction of the arrows merely equating to the function of the 
routers ROUl,ROU2 and not to a direction indication of the 
connected network elements. The first router ROUl is connected 
to the second router ROU2 . 

The dotted boxes symbolizing a virtual network 
25 VLAN1 , VLAN2 , VLAN3 , VLAN4 in each case extend into the diagram of 
the first router ROUl, to indicate that a relevantf irst router 
ROUl - not shown - defines or administers a relevant 
subnetwork. 

A third and a fourth switch LSW3 , LSW4 are connected to the 
30 second router ROU2 . A Discovery Agent DA is connected to the 

third switch LSW3 , a network address server is connected to the 



PCT/EP2004/002265 / 2003P06014WOUS 

17 

fourth switch LSW4 . The network address server AS operates for 
example in accordance with the DHCP protocol described above. 

A router is a coupling element which connects subnetworks on a 
network or level-3 layer to each other. For the method for 

5 automatic configuration of the WID of a communications device 
TP1,TP2 to be described below in accordance with the- invention 
a significant requirement is for configuration messages to be 
able to be sent from a central location outside the virtual 
packet-oriented network VLAN1 , VLAN2 , possibly via a number of 

10 routers ROUl,ROU2 through to the telecommunications device TP. 

These configuration messages are transferred by a Discovery 
Agent DA, which is for example present in the exemplary 
embodiment as a self-contained hardware and/or software unit. 
In technical implementations of this Discovery Agent DA this is 
15 executed as an alternative as a process or as software logic on 
any computer which communicates with the LAN. 

The Discovery Agent DA periodically sends configuration 
messages at prespecif iable time intervals, for example every 
ten seconds. To enable this to be done, a database of the 
20 Discovery Agent DA contains data records as to the subnetworks 
in which communications devices are present to which the 
configuration messages are to be sent. 

These configuration messages are sent as directed broadcast 
messages in the relevant subnetworks and optionally include a 
25 data part containing information that the recipient of this 

message is located in a VoIP subnetwork and what the VLAN ID of 
this subnetwork is. Otherwise no particular requirements are 
imposed on the further structure of these messages, in practice 
they can be simple messages referred to as "Hello" messages. 

30 Via the second router ROU2 as well as via further possible 
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intermediate routers - not shown - these messages finally reach 
the first router R0U1 which has configured the subnetworks at 
its virtual VLAN ports - not shown - to the first or second 
switch LSW1,LSW2 . 

5 At the first router R0U1 administering the subnetworks the 
directed broadcast character of the configuration message is 
converted into a direct broadcast valid for the subnetworks. A 
directed broadcast into the first subnetwork with the 
destination address 10.1.1.255 - in the exemplary embodiment 

10 coinciding with the first virtual network VLAN1 - is for 

example converted into a destination address with the value 
255.255.255.255 and transferred to the port of the first router 
ROU1 in direction of the first switch LSW1 . At the same time 
the identification number of the virtual network VLAN1 is used 

15 as the 802. 1Q tag in a header of the broadcast message for the 
first subnetwork thus converted from the configuration message, 
if the first virtual network VLAN1 is not the native VLAN of 
the outgoing port . 

From the tag entry of this configuration message the first 
20 communications device TP1 can read out the WID corresponding 
to the virtual packet-oriented network VLAN1 . Optionally this 
WID is also additionally contained in a data part of the 
configuration message originally sent by the Discovery Agent, 
since this is often easier to read out there. 

25 The conversion of the configuration message with a valid WID 
by the first router ROU1 ensures that exclusively configuration 
messages with the WID valid for the relevant virtual network 
VLAN1 , VLAN2 are transferred by the relevant switch LSW1,LSW2 to 
the relevant communications device TP1,TP2. Over and above this 

30 the first router ROU1 does not have to be specifically 

embodied, since this conversion is a normal operation for 
routers . 
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The Discovery Agent DA for example contains a table for 
transferring configuration messages in which information 
addressing the relevant subnetwork of a relevant virtual 
network VLANI , VLAN2 is stored. This addressing information is 

5 available for example in the form of the network address and 
network mask of the relevant subnetwork. As an alternative to 
storage of a network address and network mask, a directed 
broadcast address is stored in the table of the Discovery Agent 
DA. Additional storage of the WID valid in the relevant 

10 virtual network VLANI , VLAN2 can make sense but is not necessary 
for a successful configuration, since - as already mentioned - 
the WID is assigned in the form of the identification number 
by the first Router R0U1 . 



